This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json) Hash identifier: G7pdIvQ6w+/oEfAMPK4/Cl5YmO+PSBmQLSf5ymmEOYc= Subject key identifier: B4:75:E3:C2:51:5F:C0:68:83:01:D0:21:F3:72:54:BF:E1:64:2C:E8 Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft Manifest number: 0231 Signing time: Sat 20 Dec 2025 16:37:45 +0000 Manifest this update: Sat 20 Dec 2025 16:37:44 +0000 Manifest next update: Sat 27 Dec 2025 16:37:44 +0000 Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: zCqeHSNDfnJwlYBBqUuytJTaMMtt3OhuVvhXV5IvqvI=) 2: 04594232DEA011EE91181415C4F9AE02.roa (hash: ux/yn18OibC6Db2VOykrM0n0NcvF/7PYrwCoPjjFpC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Validity Not Before: Dec 20 16:37:44 2025 GMT Not After : Dec 27 16:37:44 2025 GMT Subject: CN=6946d0d9-4a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:64:13:d2:77:36:40:37:ac:99:eb:98:9b: 42:ab:11:3c:e8:d5:c5:7e:3f:6a:77:18:c3:18:e6: 4a:e9:8c:9f:a9:0e:30:4e:b6:25:04:4e:b8:34:dd: 7d:b4:8d:92:6c:fd:83:34:f9:25:90:f0:46:38:39: 62:d9:9e:25:1c:00:0c:c2:d3:ef:2e:87:ee:cd:aa: 87:d8:fe:53:cf:a8:aa:27:a9:99:cd:7c:9c:63:3f: 05:90:a0:47:b4:3f:81:80:46:0f:25:11:6a:21:3c: 06:05:bb:35:e3:63:d5:07:e0:4e:e3:e5:8b:35:8d: 64:30:c4:55:4e:79:21:d3:5a:fa:34:3b:e2:22:65: bd:08:20:50:0d:1f:17:65:ad:ba:4c:a2:2a:10:9e: ea:ce:9a:d8:6b:18:da:95:16:e7:25:6a:66:17:30: be:41:1f:e0:84:de:cb:89:cf:a5:23:fc:f1:2a:68: af:e8:76:1f:91:b7:68:79:41:df:1e:b9:ce:0f:e5: b0:f0:39:39:7c:3c:52:7b:f2:5e:0c:a3:d8:c2:d1: a6:21:b6:e8:8b:be:23:f5:50:fa:ef:a8:f0:5e:8f: 0b:9f:57:20:9f:94:94:13:d2:29:b5:a2:0b:e1:9c: fc:93:40:44:9c:33:3d:27:ce:b4:fe:f6:38:f8:f4: 78:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:75:E3:C2:51:5F:C0:68:83:01:D0:21:F3:72:54:BF:E1:64:2C:E8 X509v3 Authority Key Identifier: keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9c:25:c4:8f:e7:41:1e:86:d2:f9:57:eb:64:02:13:08:5d: 99:1a:a8:46:c8:33:53:eb:a1:54:b5:46:81:f1:07:ad:8b:89: 28:f8:f8:a5:7a:e5:bb:3d:8d:4c:f9:0e:f6:8a:e0:eb:dc:6d: e8:41:4d:a1:11:3e:62:14:78:14:05:eb:37:cf:d7:e9:0b:75: 53:bf:bb:ff:8b:84:4e:4d:cd:17:40:c5:e8:88:cb:c8:86:fc: 2d:13:55:ec:e4:b4:43:21:78:32:45:d2:f2:86:33:e3:01:4f: ec:67:35:83:6c:e3:27:6c:f9:a6:ca:73:66:1b:29:07:6a:56: fc:71:34:97:ac:0d:f9:35:85:a5:4d:e6:d1:d0:f9:62:7f:ce: cd:13:d1:f3:52:de:19:82:ad:d3:51:60:34:5b:14:c5:a7:4b: a8:53:cb:8a:1e:0b:c3:97:d8:d0:af:fb:45:4b:1c:0a:b2:f8: 67:f2:a3:db:81:7a:b2:17:bb:14:ff:79:fd:32:48:64:35:ff: e3:bf:cb:70:ad:78:7f:e7:06:33:5a:1b:eb:f2:f5:5c:d8:5f: a5:ea:3e:c0:83:c2:1d:3f:dd:6d:64:65:be:68:ee:40:47:5f: 8b:65:0c:19:d6:84:a3:30:93:ce:a2:f5:e8:5a:f2:e7:81:14: 68:1c:32:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKDU4MEU0NjZCN0Q0RkE4NjQ5RDJFMEIyNzM3NUVBMjg2 QzZDNTQ1ODQwHhcNMjUxMjIwMTYzNzQ0WhcNMjUxMjI3MTYzNzQ0WjAYMRYwFAYD VQQDDA02OTQ2ZDBkOS00YTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMlkE9J3NkA3rJnrmJtCqxE86NXFfj9qdxjDGOZK6YyfqQ4wTrYlBE64NN19 tI2SbP2DNPklkPBGODli2Z4lHAAMwtPvLofuzaqH2P5Tz6iqJ6mZzXycYz8FkKBH tD+BgEYPJRFqITwGBbs142PVB+BO4+WLNY1kMMRVTnkh01r6NDviImW9CCBQDR8X Za26TKIqEJ7qzprYaxjalRbnJWpmFzC+QR/ghN7Lic+lI/zxKmiv6HYfkbdoeUHf HrnOD+Ww8Dk5fDxSe/JeDKPYwtGmIbboi74j9VD676jwXo8Ln1cgn5SUE9IptaIL 4Zz8k0BEnDM9J860/vY4+PR4KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLR148JR X8BogwHQIfNyVL/hZCzoMB8GA1UdIwQYMBaAFFgORmt9T6hknS4LJzdeoobGxUWE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS8zMjZFQjBCNDhE RUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFHU2RMZ3NuTjE2aWhzYkZS WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1dBNUdhMzFQcUdTZExnc25OMTZpaHNiRlJZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS8zMjZFQjBCNDhERUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFH U2RMZ3NuTjE2aWhzYkZSWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAanCXEj+dBHobS+VfrZAITCF2ZGqhGyDNT66FUtUaB8Qeti4ko+Pil euW7PY1M+Q72iuDr3G3oQU2hET5iFHgUBes3z9fpC3VTv7v/i4ROTc0XQMXoiMvI hvwtE1Xs5LRDIXgyRdLyhjPjAU/sZzWDbOMnbPmmynNmGykHalb8cTSXrA35NYWl TebR0Plif87NE9HzUt4Zgq3TUWA0WxTFp0uoU8uKHgvDl9jQr/tFSxwKsvhn8qPb gXqyF7sU/3n9MkhkNf/jv8twrXh/5wYzWhvr8vVc2F+l6j7Ag8IdP91tZGW+aO5A R1+LZQwZ1oSjMJPOovXoWvLngRRoHDI7 -----END CERTIFICATE-----Generated at Sat Dec 20 21:10:01 2025 by rpki-client